启动 kibana # /usr/local/kibana-4.1.1-linux-x64/bin/kibana zjtest7-redis:/usr/local/kibana-4.5.3-linux-x64/bin# ./kibana log [10:50:33.506] [info][optimize] Optimizing and caching bundles for kibana and statusPage. This may take a few minutes log [10:51:56.584] [info][optimize] Optimization of bundles for kibana and statusPage complete in 83.07 seconds log [10:51:56.697] [info][status][plugin:kibana] Status changed from uninitialized to green - Ready log [10:51:56.750] [info][status][plugin:elasticsearch] Status changed from uninitialized to yellow - Waiting for Elasticsearch log [10:51:56.819] [info][status][plugin:kbn_vislib_vis_types] Status changed from uninitialized to green - Ready log [10:51:56.834] [info][status][plugin:markdown_vis] Status changed from uninitialized to green - Ready log [10:51:56.856] [info][status][plugin:metric_vis] Status changed from uninitialized to green - Ready log [10:51:56.873] [info][status][plugin:spyModes] Status changed from uninitialized to green - Ready log [10:51:56.879] [info][status][plugin:statusPage] Status changed from uninitialized to green - Ready log [10:51:56.886] [info][status][plugin:table_vis] Status changed from uninitialized to green - Ready log [10:51:56.918] [info][listening] Server running at http://192.168.32.80:5601 log [10:52:01.876] [info][status][plugin:elasticsearch] Status changed from yellow to yellow - No existing Kibana index found log [10:52:04.589] [info][status][plugin:elasticsearch] Status changed from yellow to green - Kibana index ready Configure an index pattern 配置一个Index 模式 In order to use Kibana you must configure at least one index pattern. Index patterns are used to identify the Elasticsearch index to run search and analytics against. They are also used to configure fields. 为了使用kibana 你必须配置至少一个索引模式,索引模式是用于确认Elasticsearch index 来运行搜索和分析,也可以用于配置字段 Index contains time-based events 索引基于时间的事件 Use event times to create index names [DEPRECATED] 使用事件时间来创建索引名字【过时】 Index name or pattern 索引名字或者模式 模式允许你定义动态的索引名字 使用*作为通配符,例子:logstash-* 选择: Time field name 点击“ Discover ”,可以搜索和浏览 Elasticsearch 中的数据,默认搜索的是最近 15分钟的数据。可以自定义选择时间。 到此,说明你的 ELK 平台安装部署完成。